PoC for CVE-2026-87902 — unauthenticated path traversal in WordPress page-template resolution (local PHP inclusion, conditional RCE) with a pinned vulnerable lab
☆39Sep 22, 2026Updated 3 weeks ago
Alternatives and similar repositories for cve-2026-87902-poc
Users that are interested in cve-2026-87902-poc are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- CVE-2026-87902 - WordPress - WordPress Core - Critical 9.2 - Unauthenticated Local File Inclusion (conditional RCE)☆35Oct 7, 2026Updated last week
- Next.js RCE☆53Sep 29, 2026Updated 2 weeks ago
- CnaEmulator is a standalone, general-purpose development, emulation, and testing harness for Cobalt Strike Aggressor Scripts (.cna)☆23Sep 20, 2026Updated 3 weeks ago
- Silent;Call — Pre-authentication remote root on Cisco CUCM 15.x (CVSS 10.0)☆29Aug 4, 2026Updated 2 months ago
- Drop any Windows DPAPI artifact and it identifies the format and the exact master key it needs, then decrypts once you supply the key. Of…☆31Sep 23, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- NebulaPulsar is a proof-of-concept in-memory implant framework for Java (JSP) and ASP.NET (ASPX/ASHX/ASMX) webshells, originally develope…☆47Jul 1, 2026Updated 3 months ago
- An intelligent code analysis system powered by AI large language models that automatically generates project summaries, tech stack analys…☆26Sep 20, 2026Updated 3 weeks ago
- List of lockdownd vulnerabilities in iOS 26.5☆21Oct 3, 2026Updated 2 weeks ago
- Some bugs found via binary instrumentation and fuzzing☆26Sep 16, 2026Updated last month
- ☆52Aug 5, 2026Updated 2 months ago
- CVE-2025-59501 POC code☆25Nov 20, 2025Updated 10 months ago
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- POC pre-auth RCE on Exchange☆187Aug 22, 2026Updated last month
- Group3r but in Python☆64Oct 11, 2026Updated last week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆57Sep 15, 2026Updated last month
- A technique that mixes NTDLL unhooking and hellsgate gate varients☆33Updated this week
- A lightweight Python tool designed to perform SYN port scans, with support for using spoofed source IP addresses as a deception technique…☆13Mar 5, 2025Updated last year
- Exploit-Index : The Ultimate CVE Proof of Concept (PoC) & Exploit Database. A zero-API, high-performance aggregator for 0days, vulnerabil…☆87Updated this week
- One-pass anonymous Active Directory enumeration over SAMR and LSARPC — null session, no credentials, with structured reusable output.☆69Sep 17, 2026Updated last month
- another PrivEsc potato...☆121Sep 5, 2026Updated last month
- This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.☆35Updated this week
- Bot AI Zalo 24/7 cho Hermes Agent: trả lời trong nhóm, đọc ảnh/tài liệu, soạn giáo án, văn bản, dashboard phân quyền. Dùng thử: nhóm Zalo…☆38Updated this week
- ☆38Sep 22, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- macOS Container Payload Wrapper☆23Mar 13, 2026Updated 7 months ago
- Proof of Concept for Process Code Injection Without Using WriteProcessMemory☆151Sep 27, 2026Updated 3 weeks ago
- ☆39Sep 8, 2026Updated last month
- Tool to authenticate to an LDAP/S server with a certificate through Schannel written in Rust. 🦀☆77Oct 10, 2026Updated last week
- GitLab CI lint integer-overflow RCE PoC for CVE-2026-97229, validated against the official 19.4.1 CE amd64 image☆59Updated this week
- Technical documentation, reverse engineering research, and tools for the Windows Endpoint Security Platform (WESP).☆81Sep 18, 2026Updated last month
- CVE-2026-42980 PUBLIC EXPLOIT + RESEARCH☆143Jul 7, 2026Updated 3 months ago
- Private Messages For WordPress☆14Aug 22, 2013Updated 13 years ago
- LLM Skills for Reverse Engineering Bluetooth Code☆31Aug 3, 2026Updated 2 months ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Local privilege-escalation proof of concept for the Windows WalletService vulnerability fixed in July 2026.☆61Jul 20, 2026Updated 2 months ago
- Cross-platform network execution toolkit (SMB/Kerberos/WMI/LDAP/DCSync) built on TrustedSec's Titanis - NetExec-style workflow in C#☆83Sep 18, 2026Updated last month
- Snaffler in Python☆122Oct 1, 2026Updated 2 weeks ago
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 8 months ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆40Sep 20, 2026Updated 3 weeks ago
- Pure-impacket parallel local-admin discovery via RBCD.☆47Oct 9, 2026Updated last week
- About An advanced Telegram Bot running entirely on Cloudflare Workers. It allows users to send regular Markdown or HTML text and receive …☆45Sep 15, 2026Updated last month